<div dir="ltr"><span style="font-family:arial,sans-serif;font-size:13px">Hi,</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">I'm working with </span><span style="font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,204)">snort</span><span style="font-family:arial,sans-serif;font-size:13px"> and I'd like to know if </span><span style="font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,204)">snort</span><span style="font-family:arial,sans-serif;font-size:13px"> can to detect the following:</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">- Packages with especific frame size.</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">- IP fields </span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">For example (look the image): I need to detect packages that have a size of frame equals 110 bytes (green box). and that the payload of the IP protocol is equal to 56 (red box).</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">How could I do it?. Note that the message sent is an ICMPv6 and need to analyze ICMP previous layers, namely IP and the overall size of the package.</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">beforehand, thanks for your help</span><br clear="all"><div><br></div>-- <br><div style="color:rgb(136,136,136);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
Atentamente,</div><div style="color:rgb(136,136,136);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><b>Fernando Antonio Villegas Acevedo</b></div><div style="color:rgb(136,136,136);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
Estudiante Ingeniería Civil en Informática y Telecomunicaciones</div><div style="color:rgb(136,136,136);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><b>Universidad Diego Portales</b></div>

</div>